Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PWP_pUP9_Cpn2kHbEmSv1VhTA6I.roa
File: PWP_pUP9_Cpn2kHbEmSv1VhTA6I.roa (raw, json)
Hash identifier: +7+8/WQcVN0RpbPY88c39u2jlXO3uT6Qru0SDyLDBvc=
Subject key identifier: 3D:63:FF:A5:43:FD:FC:2A:67:DA:41:DB:12:64:AF:D5:58:53:03:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E0B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PWP_pUP9_Cpn2kHbEmSv1VhTA6I.roa
Signing time: Thu 11 Apr 2024 07:22:45 +0000
ROA not before: Thu 11 Apr 2024 07:22:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15883 (0x3e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 07:22:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3D63FFA543FDFC2A67DA41DB1264AFD5585303A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:2e:30:dc:e5:b4:b0:d6:e0:a5:f2:7e:d9:
bc:72:33:61:18:ae:4d:fa:26:37:15:76:37:08:f1:
9d:8d:a6:30:a0:f0:b2:1b:4a:f1:fb:d3:ee:a6:32:
9b:fc:af:ac:40:a5:6f:17:00:09:b3:1d:ac:40:37:
a7:04:d0:66:81:a2:74:98:6d:72:12:1d:c4:fb:1a:
ad:3b:72:f3:55:95:31:01:b1:a3:66:dd:95:1e:04:
dc:95:ea:73:a8:6f:78:ca:06:1e:48:1b:bf:dc:e0:
6b:e3:58:71:1f:66:96:95:b0:32:f8:fc:63:97:29:
9f:fb:5a:18:f0:c3:f8:45:15:23:8c:81:79:1f:8b:
b1:fc:ec:9b:55:3f:5e:4c:5c:d6:70:0e:4e:0a:89:
6b:36:1b:c9:17:77:cf:07:6f:4d:3b:f1:2b:85:7b:
4f:58:85:a8:ea:91:45:ee:8f:7b:a5:20:1d:7a:85:
46:ba:a5:8c:0e:7d:a3:09:52:f4:25:06:32:4d:14:
6c:af:42:e6:21:01:c5:07:8c:a2:4b:47:cd:71:55:
d5:15:26:64:f2:01:61:52:5c:50:64:32:64:21:3d:
29:69:a0:d8:3a:1a:f3:dd:42:b5:35:b5:ef:e6:e5:
eb:ce:e7:91:3e:25:17:a1:19:22:f0:8d:c5:1c:e6:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:63:FF:A5:43:FD:FC:2A:67:DA:41:DB:12:64:AF:D5:58:53:03:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PWP_pUP9_Cpn2kHbEmSv1VhTA6I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
22:b2:8f:d4:ac:c4:99:46:e9:5a:02:fe:0a:e7:d4:d8:3d:ef:
fd:cf:67:1b:cb:c2:6b:37:4c:11:8e:55:98:cf:41:61:2d:39:
ad:e6:51:59:c9:b3:e2:0f:da:38:90:13:45:89:bc:40:aa:00:
f2:e2:1d:ab:70:55:4e:dd:b2:c4:57:eb:22:0a:c8:ad:73:cb:
67:b0:ef:33:4e:81:b8:5b:ac:c2:ec:f9:df:b4:ae:db:bf:2b:
fb:7c:a9:21:33:3d:3e:bf:0e:27:4f:95:fd:64:67:83:b7:65:
d2:64:71:a6:59:47:e6:f3:0d:d6:d3:f1:01:80:4a:f6:15:3a:
2e:63:26:f4:15:86:2e:d4:68:70:8d:5c:88:b6:50:95:1d:d3:
d8:55:30:12:de:df:99:53:54:af:8d:81:e1:6e:31:7b:48:e3:
68:d7:05:e4:44:d5:0a:c3:75:d7:5d:88:13:83:f3:3c:ef:96:
ab:4d:49:c5:44:fe:a8:62:ff:0b:9b:2a:a4:b6:1b:b3:25:f7:
7b:cb:43:cf:4a:9e:5b:de:1f:c8:d6:c3:54:1b:83:7d:ba:0c:
45:0b:84:f2:24:4d:96:49:9d:7f:cc:5e:b3:ed:1f:cd:b1:c1:
48:dd:e3:3c:5a:bb:d3:39:01:e0:36:a3:41:1f:87:ee:12:7b:
9a:ec:f3:21
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTEw
NzIyNDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNENjNGRkE1NDNGREZD
MkE2N0RBNDFEQjEyNjRBRkQ1NTg1MzAzQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCntC4w3OW0sNbgpfJ+2bxyM2EYrk36JjcVdjcI8Z2NpjCg8LIb
SvH70+6mMpv8r6xApW8XAAmzHaxAN6cE0GaBonSYbXISHcT7Gq07cvNVlTEBsaNm
3ZUeBNyV6nOob3jKBh5IG7/c4GvjWHEfZpaVsDL4/GOXKZ/7Whjww/hFFSOMgXkf
i7H87JtVP15MXNZwDk4KiWs2G8kXd88Hb0078SuFe09YhajqkUXuj3ulIB16hUa6
pYwOfaMJUvQlBjJNFGyvQuYhAcUHjKJLR81xVdUVJmTyAWFSXFBkMmQhPSlpoNg6
GvPdQrU1te/m5evO55E+JRehGSLwjcUc5nYBAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUPWP/pUP9/Cpn2kHbEmSv1VhTA6IwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1BXUF9wVVA5X0NwbjJr
SGJFbVN2MVZoVEE2SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACKyj9SsxJlG6VoC/grn1Ng97/3PZxvL
wms3TBGOVZjPQWEtOa3mUVnJs+IP2jiQE0WJvECqAPLiHatwVU7dssRX6yIKyK1z
y2ew7zNOgbhbrMLs+d+0rtu/K/t8qSEzPT6/DidPlf1kZ4O3ZdJkcaZZR+bzDdbT
8QGASvYVOi5jJvQVhi7UaHCNXIi2UJUd09hVMBLe35lTVK+NgeFuMXtI42jXBeRE
1QrDddddiBOD8zzvlqtNScVE/qhi/wubKqS2G7Ml93vLQ89KnlveH8jWw1Qbg326
DEULhPIkTZZJnX/MXrPtH82xwUjd4zxau9M5AeA2o0Efh+4Se5rs8yE=
-----END CERTIFICATE-----
Generated at Thu Apr 11 14:03:39 2024 by rpki-client on console.sobornost.net